CVE-2026-47588

A flaw was found in the NVIDIA GPU display driver for Linux. A local unprivileged user can trigger a use-after-free condition, where the driver references memory after it has been freed, by issuing a specific sequence of driver commands. Successful exploitation could allow an attacker to achieve arbitrary code execution, escalate privileges, access sensitive data, or cause a Denial of Service (DoS).

This vulnerability is evaluated as having an Important impact because an unprivileged local user could leverage memory corruption within the display driver to achieve code execution or gain elevated privileges without user interaction. Exploitation requires direct access to an affected NVIDIA graphics adapter and the proprietary driver stack. Red Hat Enterprise Linux releases are not affected by this flaw because the packaged driver versions do not contain the vulnerable code.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.